You are probably aware of the free one-time Email Exposure Check Pro (EEC Pro) we can run for you. We find all the email addresses of your domain that are out there available on the Internet. If we can find them, so can cybercriminals!
Recently the EEC Pro we ran for a customer discovered several of that customer's email addresses listed on a website ending with the file extension '.sql'. We inspect all suspicious EEC Pro results, and this particular result was a complete dump of that company's customer's database and to add insult to injury, it was even indexed by Google.
This information was publicly available and exposed to the Internet for several months. The information within the database included:
- Over 34,000 Full name, address, phone number, email, usernames, plain-text passwords and purchases made
- Over 200 plain-text full credit card numbers with expiration dates.
After further investigation it was determined that a portion of this data had been posted on Twitter several months prior by a known hacker group.
This is the kind of thing that the Email Exposure Check Pro may uncover for you, apart from the email addresses of your employees and on which (hacker) sites we found these addresses, which constitutes your phishing attack surface. See how it works:
Here's how it works:
